In the Specification: 

Please amend paragraph [0087] of the Specification as shown below. The disclosure 
added to paragraph [0087] is being incorporated from the U.S. Provisional Application No. 
60/105,963 (e.g. see pages 15-16), to which the present Application claims priority and which 
was incorporated by reference into the present Application in its entirety. Accordingly, Applicant 
respectfully submits that the material is being explicitly incorporated purely for purposes of 
clarity and that no new matter is being added. 

[0087] The application guard authorization service of the invention imposes virtually no 

performance overhead on an existing application 312. The policy rules developed at policy 
manager 210 are compiled into optimized form before being distributed to the target application 
guards 310. This optimized form only distributes attributes relevant to that application guard 
310, so that access requests may be evaluated by reviewing only a few rules rather than 
frequently analyzing the potentially large policy rule base. Each application being protected is 
associated with its own copy of the access authorization service. The policy relevant to the local 
application then resides at the application so there is no bandwidth constraint on the network 
trying to connect back to the central policy server for each access request. Because the 
application-specific policy resides locally and the applications do not share authorization 
services, there is no network delay or bottleneck. 


Attorney Docket No.: BEAS-01453US3 SRM/JXG 
M:\JGeringson\wp\BEAS\1453\us3\Respto 8-1-07 OAdoc 


2 


